Storyboard Creation
AdvisoryAudited by Static analysis on Apr 30, 2026.
Overview
No suspicious patterns detected.
Findings (0)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
The agent can use the logged-in infsh CLI to make service calls, which may consume account resources or send prompts to the provider.
The skill grants Bash access for any infsh CLI invocation. This is aligned with the image-generation purpose, but the wildcard is broader than the specific example commands.
allowed-tools: Bash(infsh *)
Use a dedicated inference.sh account or project if possible, and review generated commands before allowing costly or non-storyboard-related infsh actions.
Running a remote installer gives that installer control over the local installation process.
The quick start tells the user to run a remote install script for the inference.sh CLI. This is disclosed setup for the skill, but it is outside the registry install mechanism.
curl -fsSL https://cli.inference.sh | sh && infsh login
Prefer the documented manual install and checksum verification, or inspect the installer before running it.
Generated images may be billed to or associated with the user's inference.sh account.
The workflow requires authentication to the external inference.sh service. This is expected for hosted image generation, but it uses the user's service identity.
infsh login
Confirm which account is logged in and avoid using credentials with broader access than needed.
Storyboard text, concepts, and selected panel images may be transmitted to external services.
The skill sends user-provided storyboard prompts to an external image-generation provider. The stitching example also references image files as inputs.
infsh app run falai/flux-dev-lora --input '{ "prompt": "storyboard panel, wide establishing shot..." }'Do not include confidential scripts, unreleased creative concepts, or private images unless the provider's terms and privacy controls are acceptable.